search

integralstor / integralstor_gridcell

Gluster/ZFS based open source scale-out storage system
1 stars 3 forks source link

'login_required' missing in most of the views results in direct access into IntegralView using URLs without username and password. #176

Closed naveenmh closed 7 years ago

naveenmh commented 7 years ago

System information:

Type Version/Name
Distribution Name "CentOS Linux"
Distribution Version "6.6 (Core)"
Linux Kernel "2.6.32-504.el6.x86_64"
Architecture "x86_64"
Integralstor Version "master" commit id : "https://github.com/integralstor/integralstor_gridcell/commit/5dfc440df6f16a08bf6426c1b02a73bcf8d60f30"

Describe the problem you're observing

  1. On using urls(like IP/view_gridcells,IP/dashboard etc.,) can give access to the gridcell without authentication.

Describe the expected behaviour

Describe how to reproduce the problem

Include any warning/errors/backtraces from the system logs:

Error page/screens

fractalram commented 7 years ago

Fixed with commit 9d6e38d. The is_authenticated is supposed to be a function call and not a True/False flag.

naveenmh commented 7 years ago

Tested and verified under commit id : https://github.com/integralstor/integralstor_gridcell/commit/aa061036e751d2abce4f1a07a758c5c3fe8e1cf2. Hence closing this issue.